claude

security-awareness

Security awareness training and policy: role-based training, authorized phishing simulations for an organization's own staff, and plain-language security policies mapped to regulations.

5 on GitHubby Diego Bodartv1.0.0MITupdated 1 month ago
/

Plugin security-awareness from marketplace libre-secops in Ormus-Solutions/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (2)

  • security-policy-templates

    Reference templates and structure for common security policies (acceptable use, incident reporting, information classification), the policy, standard, procedure, and guideline hierarchy, regulatory mapping, review cycles, progressive enforcement, and exception management. Use when writing, customizi

  • social-engineering-taxonomy

    Classification of social engineering attack types, the psychological principles they exploit, recognition cues, and verification habits such as callbacks and multi-channel checks. Use when building awareness training content or teaching staff to recognize manipulation attempts.

Slash commands (2)

  • /security-awareness:phishing-sim

    Design an authorized phishing awareness simulation for an organization's own staff, with scenarios by difficulty level, measurement criteria, and follow-up training material.

  • /security-awareness:security-policy

    Generate a security policy document tailored to the organization, its audience, and applicable regulations, with roles, enforcement, exceptions, and a regulatory mapping.

Subagents (2)

  • policy-writer

    Use this agent when drafting or updating an organizational security policy such as acceptable use, data classification, incident reporting, access control, BYOD, or data retention. It writes plain-language, enforceable policies aligned to NIST CSF, ISO 27001, CIS Controls, GDPR, HIPAA, PCI DSS, and

  • security-trainer

    Use this agent when designing security awareness training or an authorized phishing simulation program for an organization's own workforce. It builds role-based, scenario-driven training on phishing, vishing, smishing, BEC, and physical social engineering, with click-rate and report-rate metrics and

View source on GitHub

More from Ormus-Solutions/LibreSecOps-Claude-Code

All 33 plugins →

Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.

2 skills · 2 commands · 2 agents

5

Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.

2 skills · 2 commands · 2 agents

5

Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.

2 skills · 2 commands · 2 agents

5

Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.

2 skills · 2 commands · 2 agents

5

Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.

2 skills · 2 commands · 2 agents

5

Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.

2 skills · 2 commands · 2 agents

5

Similar plugins

Use when you need to design, review, or improve REST APIs with Quarkus REST (Jakarta REST) — including resource classes, HTTP methods, status codes, request/response DTOs, Bean Validation, exception mappers, optional runtime OpenAPI exposure (SmallRye), contract-first generation from OpenAPI, content negotiation, pagination, sorting and filtering, API versioning, idempotency (Idempotency-Key), optimistic concurrency (ETag / If-Match), HTTP caching (Cache-Control), API deprecation (Sunset / Deprecation headers), RFC 7807 Problem Details, ISO-8601 for time in contracts, and security-aware boundaries.

1 skill

jabrena/plinth 462

knowbe4

claudecodex

KnowBe4 - phishing simulation, security awareness training, user risk management

5 skills · 5 commands · 2 agents

WYRE-AI/msp-claude-plugins 55

Professional cybersecurity policy document generator using 51 industry-standard templates from SANS and CIS Controls. Creates complete, framework-compliant policy documents (Markdown, Word, HTML, PDF) customized for your organization. Covers 15 security categories with mappings to ISO 27001, SOC 2, NIST CSF, CIS Controls v8, and GDPR.

1 skill · 1 agent

diegocconsolini/ClaudeSkillCollection 7

Security awareness training and policy: role-based training, authorized phishing simulations for an organization's own staff, and plain-language security policies mapped to regulations.

2 skills · 2 commands · 2 agents

HermeticOrmus/LibreSecOps-Claude-Code 4

Maintain security-awareness?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins33 plugins